deduplicate
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions for the user to install a tool using
npx -y @coldiq/mcp@latest. This package is hosted on the public NPM registry under the author's own organization scope. - [COMMAND_EXECUTION]: The documentation provides a shell command example for users to configure their environment with an API key and the ColdIQ MCP.
- [SAFE]: All referenced external domains (coldiq.com, api.coldiq.com) and package scopes (@coldiq) are owned by the skill author (Cold-IQ) and represent legitimate vendor functionality.
Audit Metadata